The Sleuth Kit (TSK) 4.0.1 does not properly handle "." (dotfile) file system entries in FAT file systems and other file systems for which . is not a reserved name, which allows local users to hide activities it more difficult to conduct forensics activities, as demonstrated by Flame.
{ "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro", "ubuntu_priority": "low", "binaries": [ { "binary_version": "3.2.3-2.2ubuntu0.1~esm1", "binary_name": "libtsk-dev" }, { "binary_version": "3.2.3-2.2ubuntu0.1~esm1", "binary_name": "libtsk-dev-dbgsym" }, { "binary_version": "3.2.3-2.2ubuntu0.1~esm1", "binary_name": "libtsk3-3" }, { "binary_version": "3.2.3-2.2ubuntu0.1~esm1", "binary_name": "libtsk3-3-dbg" }, { "binary_version": "3.2.3-2.2ubuntu0.1~esm1", "binary_name": "libtsk3-3-dbgsym" }, { "binary_version": "3.2.3-2.2ubuntu0.1~esm1", "binary_name": "sleuthkit" }, { "binary_version": "3.2.3-2.2ubuntu0.1~esm1", "binary_name": "sleuthkit-dbgsym" } ] }